$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa File: 4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa (raw, json) Hash identifier: gYhVXt1CqSI6zx2wp6+uZJxOGptY8sgtTSQ/aM/ZuPk= Subject key identifier: F5:79:75:CE:D2:19:88:53:FB:C4:33:A6:52:E7:CD:E8:CE:7D:49:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B67441CEC52D90205200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 2604:2d80:9900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b6:74:41:ce:c5:2d:90:20:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8ba80a35-feed-4c22-b2cc-c64a3106347a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:58:16:4e:df:d7:20:88:b6:8b:9c:d1:6f: 6e:51:c3:30:09:b8:2e:45:19:8b:61:40:82:68:05: f4:96:3d:5f:4d:40:00:1c:b6:7c:2d:39:51:7b:88: 0c:7c:75:76:4d:76:aa:1b:ad:c0:e8:b1:c8:94:a9: 05:6d:47:cb:25:12:77:94:21:a7:6d:6b:07:5d:ba: ca:2f:c5:d7:c4:81:a1:5a:9f:0e:3a:49:3f:df:e5: 61:9f:49:d1:37:9f:0d:2b:a4:03:22:46:fd:5a:da: cd:ad:03:05:17:cf:67:4b:d2:1f:b9:02:ae:0e:99: 4b:74:1c:75:3e:31:5c:71:d1:b0:43:7d:c7:2f:f7: d5:38:e5:ed:4e:ef:48:fb:2d:d0:ad:4d:83:cc:0a: 4a:20:a7:6c:4e:2b:a3:f7:06:c6:d5:51:c3:32:a8: c2:1c:08:30:32:92:3d:0d:11:4e:d5:c8:91:64:61: 57:55:10:97:ad:3c:b2:54:9b:fa:ce:1c:95:f0:8e: cf:e3:c4:ef:a8:59:1a:00:9f:cf:07:51:f2:3b:37: 7a:66:b8:f0:19:5a:b5:a3:cd:08:31:bc:aa:ea:98: a5:60:26:34:4b:b8:11:b4:8f:07:06:f4:7e:67:17: b9:18:99:9b:de:b0:4e:f2:37:95:db:c8:a3:7a:74: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:75:CE:D2:19:88:53:FB:C4:33:A6:52:E7:CD:E8:CE:7D:49:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1a:70:a8:18:a4:f5:b8:c3:81:0a:0b:59:59:17:15:f1:91: 10:7d:61:e1:ed:dd:2e:e4:db:df:38:10:82:9d:d0:21:93:fa: 0f:8b:b2:25:3e:8c:32:03:86:bb:5e:d0:22:4f:63:b9:64:de: 49:0d:72:41:4c:51:6d:e2:b1:65:93:cd:59:cf:6b:c6:55:89: d3:b7:6a:64:69:60:67:6c:ed:85:7f:48:ce:aa:79:dd:3f:7f: cc:08:d2:df:ee:02:0f:58:a0:ff:4d:79:24:93:99:65:d7:fb: ec:22:10:19:53:19:6e:fc:8b:44:41:32:15:3c:d4:33:df:ac: 86:f6:a3:d0:ea:91:e0:2e:cf:1d:a5:49:70:91:8c:bd:27:25: 7e:e5:bb:cf:2f:b6:31:d8:9d:d8:56:7f:04:11:72:9a:6b:4b: 41:64:6f:39:f1:77:f3:c4:28:28:15:7a:ba:54:f5:3f:61:7e: 6d:d4:8e:86:cd:67:73:19:ca:83:a7:50:e0:55:d4:32:e3:dc: 6a:1a:e0:d3:bc:c2:d3:b4:ea:24:7f:97:5b:ce:33:b7:97:a5: cc:29:7c:f2:3b:20:72:ec:8c:d6:c2:73:6f:bc:19:70:71:64: ab:5d:de:1b:b3:d5:12:2a:92:42:ba:c5:89:bd:f5:b3:83:07: 33:23:fc:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhLZ0Qc7FLZAgUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGJhODBhMzUtZmVlZC00YzIyLWIyY2MtYzY0YTMxMDYzNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxtYFk7f1yCItouc0W9uUcMwCbguRRmLYUCC aAX0lj1fTUAAHLZ8LTlRe4gMfHV2TXaqG63A6LHIlKkFbUfLJRJ3lCGnbWsHXbrK L8XXxIGhWp8OOkk/3+Vhn0nRN58NK6QDIkb9WtrNrQMFF89nS9IfuQKuDplLdBx1 PjFccdGwQ33HL/fVOOXtTu9I+y3QrU2DzApKIKdsTiuj9wbG1VHDMqjCHAgwMpI9 DRFO1ciRZGFXVRCXrTyyVJv6zhyV8I7P48TvqFkaAJ/PB1HyOzd6ZrjwGVq1o80I Mbyq6pilYCY0S7gRtI8HBvR+Zxe5GJmb3rBO8jeV28ijenT3BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPV5dc7SGYhT+8QzplLnzejOfUkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGU4NWMxYjMtY2MxOC0z YWZkLTliMmYtNjdiOTM3NDkwYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEkacKgYpPW4w4EKC1lZFxXxkRB9YeHt3S7k2984EIKd0CGT+g+L siU+jDIDhrte0CJPY7lk3kkNckFMUW3isWWTzVnPa8ZVidO3amRpYGds7YV/SM6q ed0/f8wI0t/uAg9YoP9NeSSTmWXX++wiEBlTGW78i0RBMhU81DPfrIb2o9DqkeAu zx2lSXCRjL0nJX7lu88vtjHYndhWfwQRcpprS0Fkbznxd/PEKCgVerpU9T9hfm3U jobNZ3MZyoOnUOBV1DLj3Goa4NO8wtO06iR/l1vOM7eXpcwpfPI7IHLsjNbCc2+8 GXBxZKtd3huz1RIqkkK6xYm99bODBzMj/BY= -----END CERTIFICATE-----Generated at Sun Apr 27 03:11:41 2025 by rpki-client